Question 6 of 230

What are common files on a web server that can be misconfigured and provide useful information for a hacker such as verbose error messages?

    Correct Answer: C

Question 7 of 230

Gerard, a disgruntled ex-employee of Sunglass IT Solutions, targets this organization to perform sophisticated attacks and bring down its reputation in the market. To launch the attacks process, he performed DNS footprinting to gather information about DNS servers and to identify the hosts connected in the target network. He used an automated tool that can retrieve information about DNS zone data including DNS domain names, computer names, IP addresses, DNS records, and network Whois records. He further exploited this information to launch other sophisticated attacks.

What is the tool employed by Gerard in the above scenario?

    Correct Answer: D

Question 8 of 230

Tony is a penetration tester tasked with performing a penetration test. After gaining initial access to a target system, he finds a list of hashed passwords.

Which of the following tools would not be useful for cracking the hashed passwords?

    Correct Answer: D

Question 9 of 230

Which of the following Google advanced search operators helps an attacker in gathering information about websites that are similar to a specified target URL?

    Correct Answer: D

Question 10 of 230

You are a penetration tester working to test the user awareness of the employees of the client XYZ. You harvested two employees’ emails from some public sources and are creating a client-side backdoor to send it to the employees via email.

Which stage of the cyber kill chain are you at?

    Correct Answer: B